CVE-2026-94043Medium· 5.3▾ TwilightPoC available

A vulnerability was determined in Free5GC up to 4.2.3

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score41/ 100 · Moderate

impact 29.2 · likelihood 0.1 · exploitation 12

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Sep 20, 2026

Updated

Sep 21, 2026

CVSS

5.3

Vendor

—

Product

Free5GC

CWE

CWE-362

Depth score

41 · Moderate

EPSS

0.57% · p47

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

decided 2026-09-21

Exploitation: poc
Automatable: yes
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Sep 21.

0.3% → 0.6%▲ 0.2%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

5 events · 5 days

Sep 20, 2026Published
Disclosed via NVD
Sep 21, 2026Record revised
Last analysed / modified upstream
Sep 21, 2026EPSS first tracked
0.3%
Sep 21, 2026Public exploit observed
Exploit / PoC code exists
Sep 25, 2026EPSS peak
0.3% → 0.6%

CWE-362 #nvd #cve.org #exploit-available

Affected

Free5GC 4.2.0
Free5GC 4.2.1
Free5GC 4.2.2
Free5GC 4.2.3

Full technical detail▾

Overview

A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_deps/free5gc/NFs/amf/internal/gmm/handler.go of the component Gmm Handler. This manipulation causes race condition. The attack can be initiated remotely. Patch name: e323b01464355781b8b8d5dd695e05cbc00a62f2. To fix this issue, it is recommended to deploy a patch.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Change history

Field changes observed since this record was first indexed.

Sep 21, 2026Public exploit / PoC published

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org#exploit-available

← Back to feed